This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
File: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft (raw, json)
Hash identifier: 7IxBddXUbyHwIo46JQiJOYtAmu80czeoOypsw9S0ffQ=
Subject key identifier: 3E:94:12:33:CF:9E:E9:A3:6F:E9:20:BC:5F:29:30:A2:1E:05:92:98
Authority key identifier: E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69
Certificate issuer: /CN=A916148F/serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569
Certificate serial: 0305
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
Manifest number: 0301
Signing time: Sun 25 Jan 2026 00:22:20 +0000
Manifest this update: Sun 25 Jan 2026 00:22:20 +0000
Manifest next update: Sun 01 Feb 2026 00:22:20 +0000
Files and hashes: 1: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl (hash: YWAc/RrqOS0anufnZTNLGEx+nbSC9XvG3Db41vlBLhk=)
2: E757164C074511EDB229157DC4F9AE02.roa (hash: onRdgGkpkgbRrilTwhd//fNz2yNBz6ru8beWXJE4ohY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl
rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 773 (0x305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916148F, serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569
Validity
Not Before: Jan 25 00:22:20 2026 GMT
Not After : Feb 1 00:22:20 2026 GMT
Subject: CN=6975623c-a457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:cd:7a:64:f7:1d:1b:e2:a7:f0:f6:ea:06:
93:91:99:7b:a7:9d:9b:de:06:30:32:51:c5:4f:12:
18:76:98:19:79:c7:d1:dd:04:80:62:16:31:8d:04:
db:40:0e:df:b3:47:77:66:ff:8e:d0:96:10:7b:fa:
10:80:b0:77:e3:80:02:9c:38:3a:dc:d1:41:93:14:
e5:3b:57:90:cb:79:ee:21:8f:78:d5:a2:4e:3d:8e:
45:ee:4f:61:c5:57:9a:ff:41:40:89:21:07:ef:e5:
93:c0:0e:17:31:f3:4b:69:fc:34:3f:28:06:38:ef:
f6:e7:ba:4b:60:c2:5d:22:4b:8b:c7:02:e8:4c:98:
91:a7:5e:76:02:58:b9:b3:e5:52:6f:1e:3e:15:70:
ce:f5:93:06:17:ec:90:d1:cd:8e:89:69:e3:14:3c:
3c:b4:10:9d:fe:53:7d:f2:1f:f6:e5:66:c9:88:e3:
e1:e9:9b:5e:a4:73:a1:c4:e3:e0:a6:37:ca:91:b3:
b1:eb:d7:a3:a9:b4:13:05:f5:07:9b:d3:cf:7d:4f:
91:06:bb:71:b4:09:7c:cc:2c:d9:be:e3:c1:d1:56:
23:1b:e6:86:2d:03:d6:3d:47:62:d3:c5:45:45:23:
3b:06:3b:73:19:6a:66:e7:e6:d4:94:36:68:78:1f:
fc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:94:12:33:CF:9E:E9:A3:6F:E9:20:BC:5F:29:30:A2:1E:05:92:98
X509v3 Authority Key Identifier:
keyid:E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:bc:39:d8:26:ec:07:d5:2c:e8:c0:1a:9b:2c:ea:6d:5b:b7:
4c:b9:7b:53:f6:2d:e5:08:f7:61:67:8a:89:63:cd:21:6d:8a:
b3:85:16:b5:87:49:5e:a4:76:f8:92:6c:16:1a:d2:6a:fd:1d:
05:a9:3e:5d:15:b1:ff:98:d4:06:a1:9b:15:43:d4:2e:f6:de:
99:a8:e4:d1:56:24:e5:e1:97:74:eb:72:dd:ac:f7:b0:e8:d1:
6a:75:34:79:41:0c:1d:02:e6:a4:7e:31:db:a2:5e:d7:1c:6b:
88:2f:8f:25:c6:5d:13:99:e2:43:46:5f:45:42:0c:02:4a:e0:
5c:06:57:d4:a5:38:50:e1:ff:a0:21:a1:94:fc:15:12:4a:de:
26:fa:fa:25:09:27:59:24:04:21:8f:b9:81:3e:f0:09:56:b7:
46:12:f9:d9:bd:de:4b:22:7b:cb:02:e9:f3:37:d1:b5:04:b3:
62:9a:f3:a2:23:36:81:ba:49:6c:9b:6b:70:d3:6e:c7:f6:e6:
aa:4d:f7:73:01:fa:a0:2e:50:a7:ae:03:bf:68:25:d4:d1:44:
be:cf:8f:5b:26:f6:e2:40:24:9d:22:9e:8a:60:06:fb:1f:0e:
7c:6b:69:02:19:6e:a8:72:34:46:8c:66:b7:3f:e7:f7:07:58:
17:85:ba:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:35:41 2026 by rpki-client